. . "An attacker can recover passwords and sensitive data such as credit card numbers, or patient records. [0013] One solution is to require reauthentication after suspension or an idle period." . . .